Spyware / Malware / Virus Removal

Can someone check my log

17 min read

Looking for the outcome? Ask AI

stevo67 Topic Starter

Post #1November 18, 2006, 11:27 AM UTC

Hi not been on for a while,I have now got a new pooter but I keep a message from my AV software saying I have a trojan but it seems to be unable to get rid

Logfile of HijackThis v1.99.1
Scan saved at 11:18:46, on 18/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer Provided By Wanadoo
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [BPS Spyware Remover] C:\Program Files\BulletProofSoft.com\BPS Spyware Remover\SpyRem.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search with Wanadoo - res://C:\WINDOWS\system32\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O10 - Unknown file in Winsock LSP: c:\program files\bulletproofsoft.com\bps spyware & adware remover\apptoport.dll
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1162581307937
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B16634AE-E422-4BEA-8043-B01BE740075E}: NameServer = 195.92.195.95 195.92.195.94
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

Stevo

Noviciate

Post #2November 22, 2006, 9:17 PM UTC

You will need to make a copy of these instructions because you have to disconnect from the internet to complete the fix. Either print them out or copy and paste them into Notepad.

Preparation

1) Download the trial version of AVG Anti-Spyware from here and save it to your Desktop.
If you already have this program installed, skip to Updating AVG Anti-Spyware: below.

* Please note that this program was formerly known as Ewido anti-spyware 4.0. Taken from the Ewido website:

ewido anti-spyware 4.0 will now continue under the new product name AVG Anti-Spyware 7.5. AVG Anti-Spyware 7.5 contains the same ewido technology, but with some further enhanced features:

Highly improved cleaning
Lower resource usage
Additional languages supported

All current licenses for ewido anti-spyware 4.0 will continue to be valid, and users can change over to the new AVG Anti-Spyware 7.5 for free.

Double click the avgas-setup file to begin installation and follow the prompts.
When the program has been installed, and you click the Finish button, AVG A-S will open.

Updating AVG Anti-Spyware:

By default AVG A-S is configured to update automatically so, if you have an active internet connection, it should do so following installation. If you are unsure whether or not it has done so, do the following:
Click the Update icon at the top and under "Manual Update" - click the Start update button.
Either AVG A-S will update or inform you that no update was available.
If you cannot access the internet with the infected PC, or you are having problems updating, you can download the signatures file from here.
Once you have installed AVG A-S, double click avgas-signatures-full-current.exe to update it.

Disabling the Resident Shield:
By default the Resident Shield is active but as it may interfere with the process of cleaning your PC, it will need to be disabled.
(When the PC has been cleaned you can activate the shield again, if you wish.)
Click the Shield icon at the top and under "Resident shield is…" - click active.
This should now change to inactive.

Changing Recommended Actions
Click the Scanner icon at the top and then click the Settings Tab.
Under "How to act?" click Recommended actions and select "Quarantine" from the menu.

You can now close AVG A-S.

AVG A-S is designed to be used to both scan for and remove malicious files and also to run in real-time alongside, but not replace, your existing anti-virus program to give an added layer of protection.
Both the Resident Shield and Automatic Updates will only be available for the thirty day trial period, after that AVG A-S will revert to a stand-alone scanner which you can keep and manually update for free and use in a similar way to Ad-Aware SE Personal, Spybot S&D etc.
Should you wish to benefit from the real-time protection, you will need to upgrade the program. To do this, simply open it and click on the Buy now button.

2) You will need to know how to boot into Safe Mode.
Instructions can be found here.

3) You will need to set Windows to show All Hidden Files and Folders.
Instructions can be found here.
** These files are hidden to stop you accidentally removing something important.
It is advisable to hide them again after fixing your computer. **

4) Log off from the internet and disconnect your modem cable for the duration of the fix.

Removal

1) Boot into Safe Mode.

2) Navigate to the C:\Windows\Temp folder and delete all the files that you find there.
Do this for all Usernames.

3) Navigate to C:\Documents and Settings\Username\Local Settings\Temp and delete all the files that you find there.
Do this for all Usernames.

4) Go to Start > Control Panel > Internet Options and under Temporary Internet files, click on Delete Files…
Check the box to the left of 'Delete all offline content' and then click on OK.

5) Ensure that ALL open Windows / Programs / Folders are closed and then run AVG A-S.

If it is not already selected, click the Scanner icon at the top and then select the Scan Tab.
Click "Complete System Scan"
While the scan is in progress the PC should be left otherwise idle - so if you fancy a cuppa, now's the time to put the kettle on!
When the scan has completed, any threats that AVG A-S has detected will be displayed.
Click the Apply all actions button at the bottom.
When AVG A-S has finished, it will display the message "All actions have been applied".

Saving a report:
Click the Save Report button at the bottom left and the "Reports" window will open.
The content of the scan report will be displayed in the right hand pane and a copy will be automatically saved as Report-Scan-date-time.txt into the C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\Reports folder.
You will need to post a copy of this report into your next reply, so if it is more convenient, you can save another copy of this report elsewhere:
Click the Save report as button and select a destination by clicking the down arrow to the right of the Save in: text box and then click Save.

Close AVG A-S.

6) Boot into Normal Mode.

Post a new HJT log (run in Normal Mode), the AVG A-S log AND a description of how your PC is running. If you have any reports from your AV, let me have the exact message, including file names and paths.

stevo67

Post #3November 25, 2006, 8:31 PM UTC

Hijack log

Logfile of HijackThis v1.99.1
Scan saved at 20:25:57, on 25/11/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\WINDOWS\system32\RunDLL32.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Messenger\msmsgs.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\wuauclt.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer Provided By Wanadoo
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MSMSGS] "C:\Program Files\Messenger\msmsgs.exe" /background
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search with Wanadoo - res://C:\WINDOWS\system32\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1162581307937
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe

AVG log file

+ Created at: 8:16:52 PM 11/25/2006

+ Scan result:

C:\Program Files\Bug Doctor -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\Bonus Software.url -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\Bug Doctor Help.chm -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\BugDoctor.exe -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\BugDoctorLiveUpdate.exe -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\FixedOnSaturdayNovember182006104257.xml -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\FixedOnSundayNovember192006185055.xml -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin.ini -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\LiveUpdate_disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\LiveUpdate_normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\LiveUpdate_pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\LiveUpdate_rollover.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\SubMainDisable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\SubMainNormal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\SubMainPressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\SubMainRollOver.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\bug.swf -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fix_complete-disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fix_complete-normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fix_complete-pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fix_complete-roll_over.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fixing_error-disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fixing_error-normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fixing_error-pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\fixing_error-rollover.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\main_disable.jpg -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\main_enable.jpg -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\main_pressed.jpg -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\main_roll_over.jpg -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\mask.bmp -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\mask1.bmp -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scan.swf -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scan_complete-disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scan_complete-normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scan_complete-pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scan_complete-roll_over.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scancomplete.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scanning_error-disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scanning_error-normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scanning_error-pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\scanning_error-rollover.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\schedule_disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\schedule_normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\schedule_pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\schedule_rollover.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\skin.ini -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\support_disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\support_normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\support_pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\support_rollover.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\unlock_key-disable.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\unlock_key-normal.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\unlock_key-pressed.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\skin\unlock_key-roll_over.gif -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\unins000.dat -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Program Files\Bug Doctor\unins000.exe -> Adware.BugDoctor : Cleaned with backup (quarantined).
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Bug Doctor_is1 -> Adware.BugDoctor : Cleaned with backup (quarantined).
C:\Documents and Settings\stevo\Cookies\stevo@2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@msnportal.112.2o7[1].txt -> TrackingCookie.2o7 : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@adrevolver[2].txt -> TrackingCookie.Adrevolver : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@adtech[2].txt -> TrackingCookie.Adtech : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@advertising[1].txt -> TrackingCookie.Advertising : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@atdmt[2].txt -> TrackingCookie.Atdmt : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@com[1].txt -> TrackingCookie.Com : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@doubleclick[2].txt -> TrackingCookie.Doubleclick : Cleaned.
C:\Documents and Settings\stevo\Cookies\[removed][1].txt -> TrackingCookie.Euroclick : Cleaned.
C:\Documents and Settings\stevo\Cookies\[removed][2].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@hitbox[1].txt -> TrackingCookie.Hitbox : Cleaned.
C:\Documents and Settings\stevo\Cookies\[removed][1].txt -> TrackingCookie.Hitslink : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@mediaplex[1].txt -> TrackingCookie.Mediaplex : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@questionmarket[1].txt -> TrackingCookie.Questionmarket : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@serving-sys[2].txt -> TrackingCookie.Serving-sys : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@tradedoubler[2].txt -> TrackingCookie.Tradedoubler : Cleaned.
C:\Documents and Settings\stevo\Cookies\stevo@tribalfusion[1].txt -> TrackingCookie.Tribalfusion : Cleaned.
C:\Documents and Settings\stevo\Cookies\[removed][1].txt -> TrackingCookie.Webtrendslive : Cleaned.

::Report end

Stevo

Noviciate

Post #4November 25, 2006, 9:27 PM UTC

Post a new HJT log (run in Normal Mode), the AVG A-S log AND a description of how your PC is running. If you have any reports from your AV, let me have the exact message, including file names and paths.

You haven't included a description of how the PC is running, or any information supplied by your AV.
Let me know how the PC is running, whether or not your AV is still detecting anything and if so, what the files names and paths are.

stevo67

Post #5November 26, 2006, 9:01 PM UTC

Hi Noviciate my pc seems to be running fine the AV is not giving me a warning about a trojan being found I have added my report from my AV proggy many thanx Stevo #26 November 2006, 20:00:04 ; ; ; Save report file = Yes ; Report file name = avp32.rpt ; Show pack info in the report = No ; Show clean object info in the report = No ; Append = No ; Limit size to (Kb) = Yes ; Limit size = 2048 ; For renaming of infected objects use = Special folder ; Folder name = Infected ; Use quarantine = No ; Enable delete or rename non-disinfected archives = No ; Assign the scan process priority to = Normal ; ; ; ; "My Computer" ; Enable processing = Yes ; Actions in case of virus detection = Ask user ; Scan local removable disk drives = Yes ; Scan local hard disk drives = Yes ; Scan network drives = No ; Scan files of following types = Yes ; Scan files of following types = All ; Exclude by mask = No ; Scan sectors = Yes ; Scan memory = Yes ; Scan MS Outlook Express data bases = Yes ; Scan StartUp objects = Yes ; Scan compound files of the following types = Yes ; Archives = Yes ; Archives with self-extractors = Yes ; Mail databases = Yes ; Plain mail = Yes ; Embedded objects = Yes ; Enable code analyser = Yes ; ; <200.1500.10101.2.103> OK Warning Suspicious Infected <[removed].1304.e04> Disinfected Deleted Renamed Quarantined <200.b04.d04.c04.1804> Will be deleted after reboot Will be renamed after reboot Disinfection failed Packed <200.1704.1604.a04.1004> Archive Encrypted Corrupted Unknown format <200.1104.f04.704.1404> Password protected Locked by another process Read access denied Disk is out of space <200.804.304.504.604> I/O Error Kernel fault Interface fault Second pass <200.404.[removed]> Object Result Description <100.3c00000c.f000018.19000010> C:\Documents and Settings\LocalService\NTUSER.DAT Read access denied C:\Documents and Settings\LocalService\ntuser.dat.LOG Read access denied C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied C:\Documents and Settings\NetworkService\NTUSER.DAT Read access denied C:\Documents and Settings\NetworkService\ntuser.dat.LOG Read access denied C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied C:\Documents and Settings\stevo\NTUSER.DAT Read access denied C:\Documents and Settings\stevo\ntuser.dat.LOG Read access denied C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied C:\Documents and Settings\stevo\Local Settings\Temporary Internet Files\Content.IE5\RYS7B5KH\widgetsus[1].exe Unknown format NSIS C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/arrow1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/arrow2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bck1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bck2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt11.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt12.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt13.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt21.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt22.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt23.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt31.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt32.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt33.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt41.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt42.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt43.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt51.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt52.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt53.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt61.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt62.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/checkbox1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/checkbox2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/checkbox3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/checkbox4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/default.skn Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/defbtn1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/defbtn2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/defbtn3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph5.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph6.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/glyph7.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/main.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/preview.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/sprite1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/tab1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/tab2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/arrow1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/arrow2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/awgrad1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/awgrad2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bck1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bck2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt11.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt12.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt13.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt21.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt22.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt23.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt31.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt32.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt33.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt41.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt42.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt43.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt51.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt52.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt53.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt61.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/bt62.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/checkbox1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/checkbox2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/checkbox3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/checkbox4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/defbtn1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/defbtn2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/defbtn3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph5.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph6.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/glyph7.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/greyskin.skn Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/main.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/preview.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/sprite1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/tab1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Greyscale.ask/tab2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/arrow1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/arrow2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/awgrad1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/awgrad2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bck1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bck2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt11.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt12.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt13.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt21.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt22.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt23.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt31.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt32.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt33.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt41.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt42.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt43.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt51.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt52.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt53.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt61.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/bt62.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/checkbox1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/checkbox2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/checkbox3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/checkbox4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/defbtn1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/defbtn2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/defbtn3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph5.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph6.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/glyph7.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/main.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/mediumblue.skn Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/preview.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/sprite1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/tab1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Medium Blue.ask/tab2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/arrow1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/arrow2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/awgrad1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/awgrad2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bck1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bck2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt11.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt12.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt13.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt21.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt22.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt23.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt31.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt32.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt33.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt41.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt42.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt43.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt51.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt52.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt53.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt61.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/bt62.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/checkbox1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/checkbox2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/checkbox3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/checkbox4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/defbtn1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/defbtn2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/defbtn3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph5.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph6.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/glyph7.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/main.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/MHQ.skn Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/preview.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/slider.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/sprite1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/tab1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\MHQ - BlueWonder.ask/tab2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/arrow1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/arrow2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/awgrad1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/awgrad2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bck1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bck2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt11.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt12.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt13.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt21.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt22.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt23.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt31.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt32.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt33.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt41.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt42.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt43.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt51.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt52.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt53.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt61.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/bt62.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/checkbox1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/checkbox2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/checkbox3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/checkbox4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/defbtn1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/defbtn2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/defbtn3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph3.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph4.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph5.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph6.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/glyph7.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/main.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/preview.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/sprite1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/tab1.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/tab2.bmp Password protected C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Yellow Sky.ask/testskin.skn Password protected C:\RECYCLER\S-1-5-21-1214440339-1336601894-839522115-1003\Dc24.exe Unknown format NSIS C:\WINDOWS\$NtServicePackUninstall$\intl.inf Unknown format Tar C:\WINDOWS\inf\intl.inf Unknown format Tar C:\WINDOWS\ServicePackFiles\i386\intl.inf Unknown format Tar C:\WINDOWS\SoftwareDistribution\Download\76805425ec45a313720bb61a3f367005b7e5a08d/INSTALL_FP6_WU.EXE Unknown format NSIS C:\WINDOWS\system32\CatRoot2\edb.log Read access denied C:\WINDOWS\system32\CatRoot2\tmp.edb Read access denied C:\WINDOWS\system32\config\default Read access denied C:\WINDOWS\system32\config\default.LOG Read access denied C:\WINDOWS\system32\config\SAM Read access denied C:\WINDOWS\system32\config\SAM.LOG Read access denied C:\WINDOWS\system32\config\SECURITY Read access denied C:\WINDOWS\system32\config\SECURITY.LOG Read access denied C:\WINDOWS\system32\config\software Read access denied C:\WINDOWS\system32\config\software.LOG Read access denied C:\WINDOWS\system32\config\system Read access denied C:\WINDOWS\system32\config\system.LOG Read access denied C:\WINDOWS\Temp\kav1.tmp Read access denied : : :Object Result <100.3c000000.28000000> :26 November 2006 20:00:04 Kaspersky Anti-Virus Scanner : started :______________________________________________________________________ : :Scanned: : :Sectors 4 :Files 170654 :Folders 2141 :Archives 1695 :Packed files 323 : :Found: : :Known viruses 0 :Virus bodies 0 :Disinfected 0 :Deleted 0 :Renamed 0 :Quarantined 0 :Warnings 0 :Suspicious 0 :Corrupted 0 :I/O Errors 25 : : :Scan speed (Kb/sec) 5721 :Scan time 28:15 :______________________________________________________________________ : :26 November 2006 20:28:19 Kaspersky Anti-Virus Scanner : finished : :

Noviciate

Post #6November 26, 2006, 10:21 PM UTC

If the PC's running fine, i'd say you were done - except for one little point:

Your log doesn't appear to show a software firewall installed - if you have one, and i've missed it, please ignore this.
If you are relying the firewall that comes with Service Pack 2, then you need to install one. While the SP2 firewall is better than nothing, it doesn't monitor outgoing traffic, so anything malicious on your computer can 'phone home' at will.

There are a few free firewalls available.
Zone Alarm: Available here.
Kerio: Available here.
Outpost: Available here.

It is important to note that you should only have one firewall installed at a time, but you can download both to your Desktop and install each in turn to see which one you prefer.

Understanding and Using Firewalls: http://www.bleepingcomputer.com/tutorials/tutorial60.html

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I want you to run your PC as normal for a few days and when you are happy that everything is fine, do the following:

Update your anti-virus program,
Disable System Restore,
Boot into Safe Mode,
Scan your computer for viruses.
When you get the all clear, reboot into Normal Mode.
Re-enable System Restore,
Create a Restore Point.
This will give a clean Restore Point should you need it in the future.
A tutorial for System Restore is available here.

The reason for waiting is that if removing the malware has caused a problem, which it occasionally does, you can put your PC back to how it was before the fix. This will re-install the malware, but an infected PC is better than an expensive paperweight!

Some bedtime reading: This is a very good tutorial about keeping your computer safe and secure on the internet.

stevo67

Post #7November 27, 2006, 4:29 PM UTC last edited November 27, 2006, 4:31 PM UTC

I usually use zonealarm but I have only used window,s XP firewall this time round.I did have it switched off as I had an internet winsox problem but it is switched on now. Looks like I wll need to get zonealarm again,or would you recomend one of the others more? Stevo Ps I have disabled system restore as this is somthing I have always done

Noviciate

Post #8November 27, 2006, 7:33 PM UTC

I have used Zone Alarm for quite a while and am happy with it, so unless you had problems or fancy a change, stick with what you know.

I have disabled system restore as this is somthing I have always done

System Restore offers a safety net in case something goes wrong during the removal process - removing that safety net isn't a good idea. As I said, an infected PC is better than a busted one!
Leave it enabled in future until you have solved any infection issues and then, and only then, flush it. You don't actually have to do this as the Restore Points will be overwritten over time, and only pose a threat to your PC if you use one, but why have keep the infected ones when you won't want to use them.

stevo67

Post #9December 15, 2006, 2:54 PM UTC

My AV proggy found a trojan called win32 vb kl which it seemed to struggle to remove

Logfile of HijackThis v1.99.1
Scan saved at 14:45:12, on 15/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\System32\nvsvc32.exe
C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe
C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\WINDOWS\system32\wscntfy.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
C:\WINDOWS\system32\RUNDLL32.EXE
C:\WINDOWS\explorer.exe
C:\hjt\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = http://www.wanadoo.co.uk/iesearch/default.htm
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.co.uk/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.wanadoo.co.uk
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Microsoft Internet Explorer Provided By Wanadoo
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O3 - Toolbar: Wanadoo - {8B68564D-53FD-4293-B80C-993A9F3988EE} - C:\WINDOWS\system32\WSBar.dll
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [SpeedTouch USB Diagnostics] "C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon
O4 - HKLM\..\Run: [AVPCC] "C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /wait
O4 - HKLM\..\Run: [Zone Labs Client] "C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe"
O4 - HKLM\..\Run: [NvMediaCenter] RunDLL32.exe NvMCTray.dll,NvTaskbarInit
O4 - HKLM\..\RunServices: [Win32] c:\documents and settings\stevo\start menu\programs\startup\win32.exe
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Yahoo! Widget Engine\YahooWidgetEngine.exe
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Search with Wanadoo - res://C:\WINDOWS\system32\WSBar.dll/VSearch.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} (Dldrv2 Control) - http://download.gigabyte.com.tw/object/Dldrv.ocx
O16 - DPF: {0E5F0222-96B9-11D3-8997-00104BD12D94} (PCPitstop Utility) - http://www.pcpitstop.com/pcpitstop/PCPitStop.CAB
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/…b?1162581307937
O16 - DPF: {E8F628B5-259A-4734-97EE-BA914D7BE941} (Driver Agent ActiveX Control) - http://driveragent.com/files/driveragent.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{B16634AE-E422-4BEA-8043-B01BE740075E}: NameServer = 195.92.195.95 195.92.195.94
O20 - Winlogon Notify: WgaLogon - C:\WINDOWS\SYSTEM32\WgaLogon.dll
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Program Files\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: AVP Control Centre Service (AVPCC) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpcc.exe" /service (file missing)
O23 - Service: KAV Monitor Service (KAVMonitorService) - Unknown owner - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal Pro\avpm.exe" /service (file missing)
O23 - Service: NBService - Nero AG - C:\Program Files\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\System32\nvsvc32.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

AV log

;#15 December 2006, 09:53:17
;
;
; Save report file = Yes
; Report file name = avp32.rpt
; Show pack info in the report = No
; Show clean object info in the report = No
; Append = No
; Limit size to (Kb) = Yes
; Limit size = 2048
; For renaming of infected objects use = Special folder
; Folder name = Infected
; Use quarantine = No
; Enable delete or rename non-disinfected archives = Yes
; Assign the scan process priority to = Normal
;
;
;
; "My Computer"
; Enable processing = Yes
; Actions in case of virus detection = Disinfect
; Make backup file before disinfection = No
; If disinfection is impossible = Delete object
; Scan local removable disk drives = Yes
; Scan local hard disk drives = Yes
; Scan network drives = No
; Scan files of following types = Yes
; Scan files of following types = All
; Exclude by mask = No
; Scan sectors = Yes
; Scan memory = Yes
; Scan MS Outlook Express data bases = Yes
; Scan StartUp objects = Yes
; Scan compound files of the following types = Yes
; Archives = Yes
; Archives with self-extractors = Yes
; Mail databases = Yes
; Plain mail = Yes
; Embedded objects = Yes
; Enable code analyser = Yes
;
; "C:\"
; Enable processing = Yes
; Actions in case of virus detection = Ask user
; Scan files of following types = Yes
; Scan files of following types = All
; Exclude by mask = No
; Scan sectors = Yes
; Scan compound files of the following types = Yes
; Archives = Yes
; Archives with self-extractors = Yes
; Mail databases = Yes
; Plain mail = Yes
; Embedded objects = Yes
; Enable code analyser = Yes
;
; "D:\"
; Enable processing = No
; Actions in case of virus detection = Disinfect
; Make backup file before disinfection = No
; If disinfection is impossible = Delete object
; Scan files of following types = Yes
; Scan files of following types = All
; Exclude by mask = No
; Scan sectors = Yes
; Scan compound files of the following types = Yes
; Archives = Yes
; Archives with self-extractors = Yes
; Mail databases = Yes
; Plain mail = Yes
; Embedded objects = Yes
; Enable code analyser = Yes
;
;
<200.1500.10101.2.103>
OK Warning Suspicious Infected <[removed].1304.e04>
Disinfected Deleted Renamed Quarantined <200.b04.d04.c04.1804>
Will be deleted after reboot Will be renamed after reboot Disinfection failed Packed <200.1704.1604.a04.1004>
Archive Encrypted Corrupted Unknown format <200.1104.f04.704.1404>
Password protected Locked by another process Read access denied Disk is out of space <200.804.304.504.604>
I/O Error Kernel fault Interface fault Second pass <200.404.[removed]>
Object Result Description <100.3c00000c.f000018.19000010>
C:\Documents and Settings\NetworkService\NTUSER.DAT Read access denied
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Read access denied
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied
C:\Documents and Settings\stevo\NTUSER.DAT Read access denied
C:\Documents and Settings\stevo\ntuser.dat.LOG Read access denied
C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Read access denied
C:\Documents and Settings\stevo\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Read access denied
C:\Documents and Settings\stevo\Local Settings\Temporary Internet Files\Content.IE5\K52BSD6J\Codecs6030_allin1[1].exe Unknown format SetupFactory
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/Ad-Aware SE Default.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0052.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/awgrad1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/awgrad2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bck2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/greyskin.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/tab1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0053.BIN/tab2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/awgrad1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/awgrad2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bck2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/tab1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/tab2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0054.BIN/testskin.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/arrow1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/arrow2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/awgrad1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/awgrad2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bck1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bck2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt11.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt12.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt13.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt21.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt22.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt23.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt31.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt32.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt33.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt41.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt42.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt43.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt51.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt52.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt53.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt61.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/bt62.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/checkbox4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/defbtn1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/defbtn2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/defbtn3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph2.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph3.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph4.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph5.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph6.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/glyph7.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/main.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/mediumblue.skn Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/preview.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/sprite1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/tab1.bmp Password protected
C:\Documents and Settings\stevo\My Documents\My Music\Ad-Aware SE Professional Edition v1.06r1 All Addons e LangPack\Ad-Aware SE Professional Edition v1.06r1\Ad-Aware SE Professional Edition v1.06r1.exe/WISE0055.BIN/tab2.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/arrow1.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/arrow2.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bck1.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bck2.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt11.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt12.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt13.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt21.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt22.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt23.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt31.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt32.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt33.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt41.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt42.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt43.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE default.ask/bt51.bmp Password protected
C:\Program Files\Lavasoft\Ad-Aware SE Professional\Skins\Ad-Aware SE d

Noviciate

Post #10December 15, 2006, 8:10 PM UTC

As this is a fresh problem, it needs to go into a fresh thread. It would also help if you included the name of the file that your AV is having issues with rather than the infection name.

little eagle

Post #11December 21, 2006, 12:41 AM UTC

Glad we could be of assistance. This topic is now closed. If you wish it reopened, please send us an email (Click for address) with a link to your thread.

Do not bother contacting us if you are not the topic starter. A valid, working link to the closed topic is required along with the user name used. If the user name does not match the one in the thread linked, the email will be deleted.
Make sure you use proper prevention to keep from having problems occur to your computer in the future.

Coyote's Installed programs for prevention:

http://forums.tomcoyote.org/index.php?showtopic=31418

The help you receive here is free. If you wish to show your appreciation, then you may donate to help keep us online.

Visit the CoyoteStore http://TomCoyote.org/coyotestore.php

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI

Can someone check my log

✨ Ask AI

Ask AI